This Policy applies to information controlled by Business Front in connection with its website, applications, Commercial Mail Receiving Agency ("CMRA") operations, private mailbox and digital mailbox services, mail imaging and content scanning, forwarding, shredding, pickup, package handling, credential display, notary and support services, payments, and Business Front SMS/MMS communications. Business Front acts as the Customer’s mail-receiving agent only to the extent authorized by USPS Form 1583 and the Terms. Some information is also processed by the United States Postal Service, carriers, payment processors, software platforms, identity-verification providers, communications vendors, or other service providers under their own legal obligations and privacy practices. This Policy does not apply to information independently collected by another company through a separate website, application, account, transaction, or consent process. Consent given to Business Front does not constitute consent for Perfect 10 Nail & Technology School, Inc. or any other company.

2.1 Contact, Account, and Business Information — We may collect a person’s name, business or organization name, trade name, title, residential or business address, remailing address, email address, telephone number, assigned PMB number, authorized recipients and users, login and account settings, signature, selected plan, service preferences, and communications preferences.

2.2 Identity and USPS Compliance Information — To establish and maintain CMRA service, we may collect information required by USPS Form 1583 and postal regulations, including date of birth, permanent home or business address, applicant and business information, identifying-document type and number, images of acceptable primary and secondary identification, notarization or real-time identity-verification information, authorization records, and termination date. We may request updated identification or information when records change or expire.

2.3 Mail, Package, and Service Information — We may collect recipient and sender information visible on an item, exterior images, tracking numbers, carrier information, dimensions, condition, delivery and pickup timestamps, signatures, storage status, customer instructions, scan or shred requests, forwarding or remailing destinations, postage information, and records of release to an authorized recipient. If a Customer specifically requests open-and-scan service, we process the contents of the selected item to carry out that instruction. Mail contents can reveal highly sensitive or confidential information. Customers should request content scanning only when authorized and should not use the Service for regulated information unless Business Front has expressly confirmed in writing that the requested use is supported.

2.4 Transaction and Payment Information — We may collect plan, invoice, payment, refund, fee, postage-deposit, tax, and billing records. Payment-card information is generally collected and processed by a payment processor. Business Front may receive a payment token, card brand, last digits, expiration information, transaction status, and related fraud or dispute information rather than the complete card number or security code.

2.5 Website, Application, Device, and Security Information — When a person uses our website, application, Wi-Fi, or digital account, we or our providers may collect IP address, device and browser type, operating system, device identifiers, pages or screens viewed, referring page, dates and times, clicks, session and login activity, approximate location inferred from an IP address, cookie or similar-technology identifiers, error and performance data, and security events.

2.6 Communications and SMS Information — We may collect emails, support requests, chat content, telephone or in-person notes, appointment information, survey or feedback responses, and SMS/MMS records. SMS records may include the mobile number, opt-in method and timestamp, consent language presented, messages sent or received, delivery status, STOP or HELP requests, and other evidence needed to administer the program and document compliance.

We may receive information from: the Customer, applicant, website visitor, or an authorized representative; account administrators, authorized recipients, business officers, employees, or agents; USPS, postal representatives, notaries, identity-verification providers, carriers, senders, payment processors, and other service providers; the website, application, cookies, logs, security tools, and connected systems; and public records, licensing or business registries, regulators, courts, law enforcement, or fraud-prevention sources when verification or legal compliance requires it.

Business Front may use information to: evaluate applications, verify identity and authority, complete USPS Form 1583 procedures, maintain required CMRA records, and update the USPS CMRA Customer Registration Database; create and secure accounts; assign PMB numbers; receive, image, hold, release, scan, forward, remail, shred, return, or otherwise process items according to customer instructions and applicable law; provide package, credential-display, appointment, notary, support, and related services; process recurring and one-time payments, postage, deposits, fees, refunds, disputes, and accounting records; send service, security, identity-verification, appointment, mail, package, billing, support, and, when separately authorized, promotional communications; authenticate users, detect fraud or misuse, investigate incidents, enforce the Terms, protect customers and staff, and maintain the security and reliability of the Services; analyze performance, troubleshoot errors, improve services, train staff, and develop aggregated or deidentified operational information; and comply with USPS rules, subpoenas, court orders, regulatory duties, tax and accounting requirements, lawful government requests, and other applicable law.

Business Front photographs or records the exterior of mail and packages as part of ordinary digital-mailbox operations. Business Front opens an item only when the Customer has given an applicable open-and-scan instruction, when inspection is legally required, or when a limited inspection is reasonably necessary to address an apparent safety emergency. We limit access to mail images and contents to personnel and providers who need access to perform authorized services, maintain the system, investigate security or legal issues, or comply with law. Business Front does not claim ownership of mail or scanned content and does not use the contents of customer mail for unrelated advertising. Scanned content is not represented as protected by attorney-client privilege, medical confidentiality, the Gramm-Leach-Bliley Act, or HIPAA merely because Business Front receives or scans it. The Services are not represented as HIPAA-compliant, and Business Front does not become a business associate merely by receiving an item.

USPS requires a CMRA to enter Form 1583 information and upload clear images of acceptable identification into the USPS CMRA Customer Registration Database. Business Front must maintain at least a digital copy of the completed Form 1583 at its business location and make required records available to postal representatives and Postal Inspectors. Identification images are not required by USPS to remain at the CMRA after they have been successfully uploaded, but replacement images may be required if an uploaded image is unclear or illegible. Business Front may disclose relevant CMRA records to USPS, the U.S. Postal Inspection Service, or another authority when required by postal rules, law, subpoena, court order, emergency process, investigation, or lawful request. A request for deletion or restriction does not override a mandatory postal, legal, security, accounting, litigation-hold, or fraud-prevention requirement.

Business Front may disclose information only as reasonably necessary in the following circumstances: USPS and government authorities — for CMRA registration, inspection, compliance, fraud or safety investigations, legal process, or other lawful duties; Service providers — to website and application hosts, digital-mailbox platforms, cloud-storage and security vendors, identity-verification and notary providers, payment processors, accounting providers, communications and SMS vendors, analytics providers, customer-support providers, and professional advisers that perform services for Business Front; Carriers and fulfillment providers — to forward or remail items, purchase postage, track shipments, process returns, or carry out a Customer’s instruction; Authorized account participants — to a verified Customer, business-account administrator, or authorized recipient, subject to account permissions and mail-release requirements; Public display — when a Customer purchases credential-display service or otherwise directs Business Front to display specified business or professional information; Business transactions — in connection with a merger, financing, reorganization, sale of assets, or transfer of the Services, subject to appropriate confidentiality and legal protections; and Protection and legal process — when reasonably necessary to enforce agreements, protect rights or safety, prevent fraud or misuse, respond to a lawful request, or establish, exercise, or defend legal claims. Service providers are permitted to use information only for the contracted service, their legitimate security and compliance obligations, or as otherwise allowed by law. A provider may have separate obligations as an independent controller for information it collects directly from a user.

BUSINESS FRONT DOES NOT SELL PERSONAL INFORMATION FOR MONEY AND DOES NOT SELL OR SHARE MOBILE INFORMATION, TEXT-MESSAGING ORIGINATOR OPT-IN DATA, OR SMS CONSENT FOR ANY THIRD PARTY’S OR AFFILIATE’S OWN MARKETING OR PROMOTIONAL PURPOSES. Business Front does not use the contents of customer mail for targeted advertising. If Business Front later uses advertising technology that applicable law treats as a sale, sharing, or targeted advertising, Business Front will update this Policy and provide any legally required notice and opt-out method before that new use begins.

Business Front sends SMS/MMS messages only under the consent and program terms described in the Terms of Service and CMRA Customer Agreement. Consent is optional and is not a condition of purchasing mailbox service. Messages may include conversational responses, enrollment or identity-verification updates, account and security alerts, appointment reminders, mail or package notifications, pickup notices, receipts, billing reminders, service changes, support, and promotional messages only when separately authorized. Business Front may provide a mobile number, message content, delivery information, and consent or opt-out status to communications vendors solely to operate, secure, and support the Business Front messaging program. Those vendors are not authorized to use that information for their own marketing. Business Front will not treat consent for its program as consent for Perfect 10 Nail & Technology School, Inc., an affiliate, or another sender. A recipient may revoke SMS consent at any time by replying STOP or by communicating another reasonable opt-out request. A recipient may reply HELP, call (904) 800-6779, or email virtualoffice@businessfront.space for assistance. Business Front may retain a minimal suppression record after opt-out so the number is not inadvertently messaged again. Opting out of SMS does not cancel mailbox service or recurring billing.

Business Front and its providers may use cookies, local storage, software development kits, pixels, and similar technologies to keep a user signed in, preserve preferences, operate forms and chat, prevent fraud, maintain security, measure traffic and performance, and understand how Services are used. Some technologies are necessary for the requested service; others may support analytics or communications. Available controls may include browser settings, device permissions, cookie preference tools, application settings, or legally recognized opt-out signals. Blocking necessary technologies may prevent parts of the website or application from working. Because a uniform "Do Not Track" standard has not been adopted, our response to browser Do Not Track signals may vary; we honor legally required universal opt-out signals when applicable.

Business Front retains information only for as long as reasonably necessary for the purpose collected, the Customer’s instructions, and applicable legal, postal, accounting, security, dispute, and operational requirements. Retention periods vary by record type. For example: USPS Form 1583 and termination records are retained for at least the period required by current USPS rules; identification images maintained by Business Front may be removed after successful USPS upload when no longer needed for verification, replacement, fraud prevention, or another lawful purpose; mail images, scanned contents, service instructions, and pickup or forwarding records are retained according to the selected service, account status, customer instructions, security needs, and applicable law; transaction, tax, accounting, consent, opt-out, complaint, security, and legal records are retained for the applicable compliance or limitation period; and backup copies may remain for a limited period until overwritten under the normal backup cycle. When records are no longer required, Business Front takes reasonable measures to destroy, erase, anonymize, or otherwise make personal information unreadable or undecipherable. Physical mail is handled under the Terms, the Customer’s documented instructions, and USPS requirements; deletion of a digital record does not alter the legally required handling of the physical mailpiece.

Business Front uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information, including access controls, authentication, staff procedures, vendor oversight, physical mail controls, and secure disposal practices. No physical or electronic system is completely secure, and Business Front cannot guarantee that unauthorized access, loss, misuse, alteration, or disclosure will never occur. Customers must use strong credentials, protect devices and passwords, review authorized users, and promptly report suspected compromise or incorrect mail access. If Business Front determines that a security incident requires notice, it will provide notice to affected persons and authorities in the manner and time required by applicable law.

Subject to identity verification, account authority, applicable law, and mandatory retention obligations, a person may ask Business Front to provide access to, correct, delete, or provide a copy of personal information maintained about that person. A person may also ask about disclosures, withdraw an optional consent, opt out of promotional email or SMS, or appeal a denial when an applicable law provides that right. Requests may be submitted by email to virtualoffice@businessfront.space or by mail to Business Front, Inc., Privacy Request, 6501 Arlington Expressway, Suite B105, Jacksonville, Florida 32211. The request should identify the person, the relevant account or PMB if applicable, the right being requested, and enough information for Business Front to authenticate the request. Business Front may request additional verification and may decline a request that cannot be authenticated, would expose another person’s information, is fraudulent or abusive, or conflicts with law or required records. An authorized agent may submit a request when the agent provides satisfactory written authority and Business Front can verify both the agent’s authority and the identity of the person concerned. Business Front will not discriminate unlawfully against a person for exercising an applicable privacy right. Even when a specific state privacy statute does not apply to Business Front, we will consider reasonable verified requests under this section as operationally practicable.

When Services are purchased by an entity, the entity may control the account and designate administrators or authorized users. Information and mail access may be visible to those persons according to the account configuration and documented authority. Individuals using an organization’s account should direct internal privacy questions to that organization. Business Front may require separate Form 1583 authorization before releasing mail addressed to an individual or additional business name.

Business Front’s website and Services are not directed to children under thirteen, and mailbox enrollment is limited to persons who are at least eighteen and legally capable of entering the Terms. A parent or guardian may list a minor as permitted by USPS Form 1583 procedures. If Business Front learns that it collected online personal information directly from a child under thirteen without required authorization, it will take appropriate steps to delete or otherwise lawfully handle that information.

The Services may link to or depend on third-party websites, applications, payment pages, carrier systems, maps, social-media pages, or app stores. Business Front does not control information a third party collects directly under its own policy. Customers should review the privacy terms presented by those providers. This Policy does not expand Business Front’s responsibility for independent third-party systems.

Business Front is based in Florida and provides Services from the United States. Information may be processed and stored in the United States and in other locations where approved service providers operate. A person accessing the Services from another country is responsible for determining whether the Services are appropriate, and Business Front will provide any notice or safeguard required by applicable law when such law applies.

Business Front may update this Policy prospectively to reflect legal, postal, security, operational, vendor, or service changes. The revised Policy will state a new effective date and will be posted through the website or application. Material changes will be communicated through the website, account, or current contact information when reasonable and legally required. Business Front will request new consent before using information for a materially different purpose when applicable law requires consent.

Questions, privacy requests, complaints, or security reports may be directed to: Business Front, Inc. Attn: Privacy Request 6501 Arlington Expressway, Suite B105 Jacksonville, Florida 32211 Telephone: (904) 800-6779 Email: virtualoffice@businessfront.space Website: https://www.businessfront.space